incoming-request-advisor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to extract the full incoming message and to include direct quotes verbatim, which would force the LLM to reproduce any secret values present in the pasted message (creating an exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests the outsider-authored free text in the “incoming message itself” (including pasted Slack/email text or extracted content from an attached screenshot/image/file/PDF) as the context dump it analyzes at runtime.